What
Every path where the self-hosted gateway attaches its own operator credential to an upstream provider request now deletes the inbound authorization and x-api-key headers first, so a key supplied by the client can no longer reach the upstream alongside the gateway's own.
Evidence
(r.delete("authorization"), r.delete("x-api-key"));
Strings lifted out of the shipped bundle, so the claim above can be checked against them.